You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2026/08/28 21:55:04 UTC
(commons-xml) 30/36: Javadoc: Use "secure" terminology.
This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit c996773278df8ec02f45a95f4d9dfb8478d10d91
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Fri Aug 28 17:53:52 2026 -0400
Javadoc: Use "secure" terminology.
---
.../java/org/apache/commons/xml/SecureTransformerFactory.java | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java b/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java
index dcf12ed..f6db179 100644
--- a/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java
+++ b/src/main/java/org/apache/commons/xml/SecureTransformerFactory.java
@@ -68,7 +68,7 @@
* {@code newXMLFilter(..)}), if reachable by casting the returned factory, produce objects carrying the same guarantees.
* </p>
* <p>
- * Not a {@link TransformerFactory} itself, so none of the JAXP static factory methods is inherited: a caller cannot reach a non-hardened factory through this class
+ * Not a {@link TransformerFactory} itself, so none of the JAXP static factory methods is inherited: a caller cannot reach a non-secured factory through this class
* by calling an inherited method such as {@code newDefaultInstance()}. The secure factories are instances of a nested, non-public wrapper class.
* </p>
*
@@ -82,7 +82,7 @@ public final class SecureTransformerFactory {
*
* <p>Used by providers whose underlying TrAX implementation pulls a new {@code SAXParserFactory.newInstance()} for any Source that is not already a
* {@link SAXSource} carrying its own {@link XMLReader}, and only sets {@link javax.xml.XMLConstants#FEATURE_SECURE_PROCESSING FSP} on the resulting reader.
- * Wrapping the factory and rewriting the Source upstream guarantees the parse runs through an {@link org.apache.commons.xml}-hardened reader instead.</p>
+ * Wrapping the factory and rewriting the Source upstream guarantees the parse runs through an {@link org.apache.commons.xml}-secured reader instead.</p>
*
* <p>Three layers cooperate:</p>
* <ol>
@@ -96,7 +96,7 @@ public final class SecureTransformerFactory {
* <p>The {@link SAXTransformerFactory} extension products ride the same wrappers: {@code newTransformerHandler}/{@code newTemplatesHandler} products are
* wrapped ({@link SecureTransformerHandler}, {@link SecureTemplatesHandler}) so the {@link Transformer}/{@link Templates} they expose carry the resolver
* floor, and {@code newXMLFilter} returns a {@link SecureXMLFilter} composed from these wrappers instead of the implementation's filter, which would
- * self-provision an unhardened input reader.</p>
+ * self-provision an unsecured input reader.</p>
*
* <h2>Caveats</h2>
* <ul>
@@ -424,7 +424,7 @@ public static TransformerFactory newInstance(final String factoryClassName, fina
* routed through the floor rather than replacing it, so a caller can opt a specific URI in but cannot reopen the fetch.</li>
* <li><strong>The nested wrapper</strong>: required. Both implementations fall back to {@code SAXParserFactory.newInstance()} to parse a
* stylesheet or source document that does not carry its own reader, and only set FSP on it; wrapping the factory rewrites every {@link Source} through an
- * {@link org.apache.commons.xml}-hardened reader instead.</li>
+ * {@link org.apache.commons.xml}-secured reader instead.</li>
* </ul>
*
* @param factory the factory to secure; never {@code null}.